Privacy

Last updated 30 September 2026

This notice covers two separate things: the getmetria.app website and the Metria app.

This website

getmetria.app is a static information page. It has no accounts, no sign-up, no forms and no comment fields, so there is nothing here for you to submit.

• No cookies. The site sets none.
• No analytics or tracking. There is no analytics tool, tag manager, advertising pixel or session recorder on this site.
• No third-party requests. Fonts and images are served from this domain, so simply reading the page does not report your visit to anyone else.

Like any website, it is served by a hosting provider — Vercel — which processes standard server request data such as your IP address, the page requested, the time, and your browser's user-agent string, in order to deliver the page and protect the service against abuse.

The Metria app

This section describes how the Metria app handles your data. It is the binding policy for the app, and it will be updated if any of the following changes.

Your data stays on your device by default

Metria is built local-first. Your answers, your routine, your check-offs, your results and your progress photos are stored on your phone, not on a server. Progress photos are never uploaded; deleting them in the app deletes the files. The sections below describe what does leave your phone, and why.

Skin analysis

When you run a skin check, the app takes three photos of your face (front, left and right) with your front camera. The photos are resized on your phone and sent over an encrypted connection to our analysis service, which passes them to Anthropic's Claude model for analysis and returns the result to your phone.

• The images are not stored on our servers.
• The images are never written to our logs. That rule is enforced by an automated test on every code path, including failures.
• Anthropic holds the images and the result for up to 30 days, to check the service is not being misused, and then deletes them. They are not used to train models.
• Only the analysis result comes back, and it is stored on your device.

Face data

The photos a skin check takes are photos of your face. This section covers everything Metria does with them.

• What is collected. Three photos of your face (front, left and right) each time you run a skin check. While the camera is open, the app also detects where your face is in the frame (its position, size and angle) so it can guide you and take the photos automatically. That detection runs entirely on your phone; its results are never stored and never sent anywhere.
• What is not collected. Metria does not use Face ID, does not create face maps, face geometry or face templates, and does not use your face to identify or recognise you.
• How it is used. Only to analyse your skin (blemishes, redness, texture and tone evenness) and show you the result. Your face photos are never used for advertising, never sold, and never used to judge your age, gender, ethnicity or appearance.
• Who receives it. Our analysis service, hosted by Vercel, and Anthropic, which runs the analysis. No one else receives your face photos.
• How long it is kept. On our servers, not at all: the photos are held in memory only while the analysis runs. At Anthropic, up to 30 days, as described above, and then deleted. On your phone, the photos are deleted once the result is saved, or when you cancel, retake or leave the scan.
• Progress photos. If you turn on progress photos, the front photo from each scan is kept on your phone so you can compare over time. Progress photos are off unless you turn them on, and they are never uploaded by Metria. Like other app data, they can be included in your own device backups.
• Deleting it. You can delete any progress photo, or all of them, in the app. Deleting the app deletes the photos it keeps on your phone. No face photos are kept on our servers, so there is nothing there to delete.

Checking a product

When you check a product, you can scan its barcode or photograph it.

• A barcode is looked up in Metria's product catalogue and, if it is not there, in Open Beauty Facts, a public product database. Only the barcode number is sent.
• A photo of the ingredient list on the back of the bottle is sent, if you are signed in, to our service, which passes it to Anthropic's Claude model to read the ingredients. It is not stored on our servers, it is deleted from your phone once it has been read, and Anthropic holds it for up to 30 days on the same terms as a skin photo.
• A photo of the front of the bottle stays on your phone, as the product's picture if you save it.

Whether a product suits you is worked out on your phone, against the ingredients you told Metria you avoid.

Product suggestions

If you are signed in, the app asks our service which products to suggest for your routine. It sends only what is needed to choose them: your country, which steps of your routine still need a product, the skin areas you chose to focus on, whether you said your skin is sensitive, and whether your routine is kept to the basics. The ingredients you avoid stay on your phone; suggestions are checked against them there.

Each set of suggestions is stored with your account for up to 30 days, together with the details it was based on and which suggestions you were shown. Details about your skin can count as health information in some countries; Metria uses them only for the features you ask for.

Keeping the service from being abused

To keep scans and ingredient reading fair and affordable, our service records each attempt — whether it succeeded, and which day on your phone it counts for — against your account if you are signed in, or otherwise against a random scan ID the app creates on your phone. It also records a one-way hashed value derived from your IP address. The scan ID and the address are hashed with a server-side secret, so the stored values cannot be turned back into the originals. These records are deleted after 48 hours (two days for ingredient reading).

Signing in is optional

You can use Metria without an account. If you choose to create one — with Apple or Google; there is no email-and-password account — it is handled by Supabase on our behalf, and we receive an account identifier, the email address the provider passes on and, if you allow it, your name. The app offers account deletion.

Subscriptions

Any purchase is made through the App Store and handled by Apple. We use RevenueCat to tell the app whether a subscription is active. Payment card details are handled by Apple and never reach us.

UV index

If you allow location access, the app rounds your coordinates to about 1 km on your phone and sends them to Open-Meteo to look up the current UV index for your area. We do not store your location on our servers.

Product analytics

To understand where people get stuck during setup, the app can send product-analytics events to PostHog, hosted in the EU. These events use a fixed allowlist of coarse values — for example which setup step was reached, discovery source, age range, optional gender, country and routine preference.

• No photos and no analysis results are sent.
• No free-text you have typed is sent.
• Screen and session recording is off, and the recording component is not installed in the app.
• Events are linked to a random identifier the app creates, not to your account. PostHog receives your IP address when events are sent and may use it to estimate an approximate location, such as your country or city.

Notifications

Reminders are scheduled by your own device. Metria has no push server.

Age

Metria is intended for people aged 13 or older. The youngest age range the app offers begins at 13. Metria does not verify anyone’s age, and for anyone who selects an age range under 18 the routine and any product suggestions are kept to gentle basics.

Deleting your data

Because the data lives on your phone, deleting the app removes it. The app also lets you delete your progress photos, export a copy of your data, and delete your account if you created one.

Deleting your account removes it and the product suggestions stored with it. The abuse-prevention records above stop being linked to you straight away and are deleted on their usual schedule, within 48 hours (two days for ingredient reading).

Services that help run the app

Metria uses Supabase (accounts, the product catalogue and suggestions), Vercel (the analysis service), Anthropic (photo analysis and ingredient reading), RevenueCat (subscription status), PostHog (setup analytics, hosted in the EU), Open-Meteo (UV index) and Open Beauty Facts (barcode lookups). Apple and Google handle sign-in and payments under their own policies. Some of these providers process data in the United States; where they do, the transfer relies on the safeguards they offer under data-protection law, such as standard contractual clauses.

We do not sell your data, show ads, or track you across other companies' apps and websites.

Your rights

We process your data to provide the features you use, with your permission where the app asks for it (camera, photos and location), and — for abuse prevention and setup analytics — because we have a legitimate interest in keeping the service working and affordable.

You can ask for a copy of your data, ask us to correct or delete it, and object to or restrict how it is processed. You can withdraw a permission at any time in your phone's settings. To make a request, write to the address below. You can also complain to the Norwegian Data Protection Authority (Datatilsynet) or to the data-protection authority where you live.

Who is responsible, and how to reach us

Metria is operated by Philip Erlien, an individual based in Norway. For applicable data-protection law, Philip Erlien is responsible for Metria’s processing of personal data.

Questions about privacy, including any request relating to your data: metria.support@gmail.com.